View source for Installing-signed-GPLPV-drivers

The GPLPV driver is a driver for Microsoft Windows, which enables Windows DomU systems virtualised in Xen to access the network and block drivers of the Xen Dom0. This provides a significant performance and reliability gain over the standard devices emulated by Xen/Qemu/Kvm. 

The GPLPV driver is a free software driver developed by James Harper. He maintains the sources in the [http://xenbits.xensource.com/ext/win-pvdrivers/ Xen.org mercurial version control system], but the current [http://www.meadowcourt.org/downloads/ official build] are only test-signed, i.e. they are not recognised to be trusted Windows drivers. While this doesn't pose problems for older versions of Windows (for which you only need to acknowledge a warning during installation), the 64 bit version of Windows Vista / 7 / 2008 server enforce the use of signed drivers. The only workaround for these drivers is to enable the test mode using ''bcdedit''. This, however, has the disadvantage that a note about the test mode is displayed on the desktop and that using the test mode voids the warranty of some applications. 

= Installing signed GPLPV drivers in Windows Xen instances  =

Univention provides the GPLPV drivers signed with a Software Publishers Certificate obtained from the GlobalSign CA. This allows you to run the drivers without the need of enabling the test mode. 

Starting from UCS 2.4-4 the GPLPV drivers are included in the form of ISO images, which can be added in the drive settings of the UCS Virtual Machine Manager. Alternatively, the drivers are available at http://apt.univention.de/download/addons/gplpv-drivers/ . 

The sources were obtained from http://xenbits.xensource.com/ext/win-pvdrivers. 

The directory includes SHA256 hashes of the individual MSI files in the files:
* [http://apt.univention.de/download/addons/gplpv-drivers/hashes-0.11.0.372.txt.asc hashes-0.11.0.372.txt.asc]
* [http://apt.univention.de/download/addons/gplpv-drivers/hashes-0.11.0.356.txt.asc hashes-0.11.0.356.txt.asc]
* [http://apt.univention.de/download/addons/gplpv-drivers/hashes.txt.asc hashes-0.11.0.308.txt.asc]
These files are signed with the PGP key used for the security updates for Univention Corporate Server (F510AADA). 

There are different MSI installer packages for the various Windows releases, which can be started with a simple double click. The "typical" installation should cover most use cases. The Windows installations need to be updated to the current service packs before installing the GPLPV drivers. E.g., using the GPLPV driver on Windows XP w/o SP3 is not possible. 

{| border="1" cellspacing="1" cellpadding="1" class="wikitable"
|-
! Windows versions 
! Driver packages
|-
|64 Bit - Windows Server 2012<br> 
64 Bit - Windows Server 2008 R2<br>
64 Bit - Windows Server 2008<br>
64 Bit - Windows 8<br>
64 Bit - Windows 7<br>
64 Bit - Windows Vista
| [http://apt.univention.de/download/addons/gplpv-drivers/gplpv_Vista2008x64_signed_0.11.0.372.msi gplpv_Vista2008x64_0.11.0.372.msi]<br>
[http://apt.univention.de/download/addons/gplpv-drivers/gplpv_Vista2008x64_signed_0.11.0.356.msi gplpv_Vista2008x64_0.11.0.356.msi]<br>
[http://apt.univention.de/download/addons/gplpv-drivers/gplpv_Vista2008x64_signed_0.11.0.308.msi gplpv_Vista2008x64_0.11.0.308.msi] 
|-
|32Bit - Windows Server 2008<br>
32Bit - Windows 8<br>
32Bit - Windows 7<br>
32Bit - Windows Vista
| [http://apt.univention.de/download/addons/gplpv-drivers/gplpv_Vista2008x32_signed_0.11.0.372.msi gplpv_Vista2008x32_0.11.0.372.msi]<br>
[http://apt.univention.de/download/addons/gplpv-drivers/gplpv_Vista2008x32_signed_0.11.0.356.msi gplpv_Vista2008x32_0.11.0.356.msi]<br>
[http://apt.univention.de/download/addons/gplpv-drivers/gplpv_Vista2008x32_signed_0.11.0.308.msi gplpv_Vista2008x32_0.11.0.308.msi]
|-
|64 Bit - Windows Server 2003
| [http://apt.univention.de/download/addons/gplpv-drivers/gplpv_2003x64_signed_0.11.0.372.msi gplpv_2003x64_0.11.0.372.msi]<br>
[http://apt.univention.de/download/addons/gplpv-drivers/gplpv_2003x64_signed_0.11.0.356.msi gplpv_2003x64_0.11.0.356.msi]<br>
[http://apt.univention.de/download/addons/gplpv-drivers/gplpv_2003x64_signed_0.11.0.308.msi gplpv_2003x64_0.11.0.308.msi]
|-
|32 Bit - Windows Server 2003
| [http://apt.univention.de/download/addons/gplpv-drivers/gplpv_2003x32_signed_0.11.0.372.msi gplpv_2003x32_0.11.0.372.msi]<br>
[http://apt.univention.de/download/addons/gplpv-drivers/gplpv_2003x32_signed_0.11.0.356.msi gplpv_2003x32_0.11.0.356.msi]<br>
[http://apt.univention.de/download/addons/gplpv-drivers/gplpv_2003x32_signed_0.11.0.308.msi gplpv_2003x32_0.11.0.308.msi] 
|-
| 32 Bit - Windows Server 2000 
| [http://apt.univention.de/download/addons/gplpv-drivers/gplpv_2000_signed_0.11.0.372.msi gplpv_2000_signed_0.11.0.372.msi]<br>
[http://apt.univention.de/download/addons/gplpv-drivers/gplpv_2000_signed_0.11.0.356.msi gplpv_2000_signed_0.11.0.356.msi]<br>
[http://apt.univention.de/download/addons/gplpv-drivers/gplpv_2000_signed_0.11.0.308.msi gplpv_2000_signed_0.11.0.308.msi]
|-
| 32 Bit - Windows XP
| [http://apt.univention.de/download/addons/gplpv-drivers/gplpv_XP_signed_0.11.0.372.msi gplpv_XP_signed_0.11.0.372.msi]<br>
[http://apt.univention.de/download/addons/gplpv-drivers/gplpv_XP_signed_0.11.0.356.msi gplpv_XP_signed_0.11.0.356.msi]<br>
[http://apt.univention.de/download/addons/gplpv-drivers/gplpv_XP_signed_0.11.0.308.msi gplpv_XP_signed_0.11.0.308.msi] 
|}

After successful installation "Xen Net Device Driver" and "Xen Block Device Driver" can be found in the device manager.

= Updating from test-signed GPLPV drivers  =

Upgrading an installation with the test-signed drivers involves a few additional steps: 

1. Download http://www.meadowcourt.org/downloads/gplpv_uninstall_bat.zip and extract uninstall_0.10.x.bat out of the ZIP archive.

2. The test-signed drivers need to be removed in the system settings module fo uninstalling software. The component to be uninstalled is labelled "GPL PV Drivers for Windows", the five subelemenents below are deinstalled along with the main package. The final question, whether the system should be rebooted now, needs to be answered with "No".

3. Execute uninstall_0.10.x.bat

4. Reboot the system.

5. Now the Univention-signed MSI package can be installed as described above. After successul installation the system must be rebooted.

6. Finally test mode can be deactivated by entering the command "bcdedit /set testsigning off". This setting only takes effect after a reboot.

[[Category:EN]]